Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: O8iCZhkP6H2LuyILtMw1N3y6XTONm/TAhon0/OEjMNU=
Subject key identifier: 07:84:1A:04:B0:E2:39:A3:00:17:9F:FD:5C:12:F8:D0:61:76:91:42
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0197741B3A7EAE1A7B9B28792606AE031BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0584
Signing time: Sun 15 Jun 2025 15:00:30 +0000
Manifest this update: Sun 15 Jun 2025 15:00:30 +0000
Manifest next update: Mon 16 Jun 2025 15:00:30 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: 2BrSihhL6zaspyajR2vBvtwFjYHNxm6TaZDLfv7qsU0=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:3a:7e:ae:1a:7b:9b:28:79:26:06:ae:03:1b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jun 15 15:00:30 2025 GMT
Not After : Jun 16 15:00:30 2025 GMT
Subject: CN=07841a04b0e239a300179ffd5c12f8d061769142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:7f:30:fd:a5:e2:5e:19:16:94:a8:15:71:
13:26:7a:22:43:cb:9b:6b:29:43:e1:c9:c2:7a:d2:
ab:54:2f:e0:32:16:79:91:ba:f6:78:c0:d7:23:5e:
d9:fc:4a:46:4f:7b:8f:74:a2:f6:51:9d:8d:67:c0:
3a:aa:20:04:a1:1c:2e:2e:7f:65:a4:0c:2f:2a:e8:
61:01:2a:29:a9:0b:5d:98:14:b1:f9:12:15:14:1e:
6f:10:5b:70:4a:19:eb:b5:c3:37:af:7e:50:3f:28:
5c:85:e5:89:84:2d:f9:69:57:80:cb:0d:96:6d:bb:
0e:84:5d:e7:f6:b9:a2:b7:e0:e9:f9:f6:21:e9:79:
e2:5c:4f:9e:1e:59:67:38:66:7a:45:c4:c5:79:97:
65:59:89:39:9a:d4:12:6e:c5:f8:25:b8:95:93:6a:
2d:26:d8:6e:d4:c7:e3:64:3b:01:10:c8:87:80:30:
7a:43:d2:7f:07:38:45:8d:2e:53:7a:ab:4c:6d:21:
b2:17:bc:50:87:f4:af:4e:9e:34:e7:08:14:07:4d:
b5:e5:76:a7:d2:8c:6d:17:5f:14:98:83:1b:cf:87:
fe:20:55:b5:18:91:3f:8f:4a:13:76:f0:07:0b:a1:
96:8f:e6:31:f5:98:06:77:69:fc:09:d7:2d:39:d7:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:1A:04:B0:E2:39:A3:00:17:9F:FD:5C:12:F8:D0:61:76:91:42
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:99:c5:51:5e:0e:12:76:01:fb:b6:87:8c:41:8d:0d:59:
17:ef:3c:b4:80:8f:8c:23:4a:c5:e6:c7:80:a7:0f:76:39:22:
d1:2f:4d:86:5d:2d:c0:bf:9c:69:ae:a3:0b:95:5f:9d:19:9e:
26:da:d5:92:ed:dd:85:28:57:35:41:e0:9b:e1:a2:0f:78:7a:
b6:63:bf:fe:05:71:17:48:ff:e9:9d:5c:03:9b:06:8f:34:dc:
f3:14:59:3b:66:26:6b:33:06:8a:f2:8b:a1:38:96:67:a1:07:
54:af:7b:a7:3f:6f:58:be:07:e6:83:d8:77:d8:6a:79:f2:03:
70:98:31:ee:96:69:c3:28:f8:a5:30:00:4f:02:a4:22:ad:54:
51:9e:1f:3c:a7:aa:09:78:7f:4c:89:1e:e3:44:e8:e6:2a:2e:
dc:17:0e:57:ab:ed:ed:a0:be:15:71:ca:23:b3:cf:7f:b7:c4:
88:cd:2c:ae:fb:be:b4:e2:d7:13:ac:77:a9:28:1b:8e:77:74:
bb:ae:68:53:bc:18:5c:42:c0:03:6b:7d:9d:43:6a:d9:36:7d:
9a:72:d5:50:f7:01:db:6f:f7:9f:ce:68:98:fe:b7:b0:ff:39:
86:48:37:00:ef:74:e8:37:0f:5c:f9:1d:96:bc:9c:ac:63:d1:
7a:5c:2b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:01:48 2025 by rpki-client